ci: publish multi-arch supervisor image (linux/amd64 + linux/arm64)#4
Merged
ci: publish multi-arch supervisor image (linux/amd64 + linux/arm64)#4
Conversation
Add build-and-push-supervisor job to publish.yml so the supervisor image is built for linux/amd64 and linux/arm64 and pushed to ghcr.io/kagenti/openshell/supervisor on every push to main/mvp. Also scope the GHA build cache by job (gateway vs supervisor) to prevent cache key collisions between the two parallel jobs. Assisted-By: Claude (Anthropic AI) <noreply@anthropic.com> Signed-off-by: Paolo Dettori <dettori@us.ibm.com>
pdettori
added a commit
to pdettori/kagenti
that referenced
this pull request
May 1, 2026
Add supervisorImage value (ghcr.io/kagenti/openshell/supervisor:latest) and pass it as --supervisor-image to the compute driver, replacing the hardcoded quay.io/azaalouk/openshell-supervisor:latest default which is amd64-only. The new image is built from kagenti/OpenShell@mvp for linux/amd64 and linux/arm64, enabling sandbox pods to run on arm64 Kind clusters (macOS Apple Silicon). Closes: kagenti/OpenShell#4 Assisted-By: Claude (Anthropic AI) <noreply@anthropic.com> Signed-off-by: Paolo Dettori <dettori@us.ibm.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
build-and-push-supervisorjob topublish.yml, mirroring the existing gateway jobsupervisortarget fromdeploy/docker/Dockerfile.imagesforlinux/amd64andlinux/arm64ghcr.io/kagenti/openshell/supervisorwith the same tag scheme as the gateway (mvp-<sha>on branch push,v*on tags)scope=gateway/scope=supervisor) to prevent cache key collisions between the two parallel jobsPublish Imagesto reflect that it now covers both componentsWhy
The supervisor image (
quay.io/azaalouk/openshell-supervisor:latest) isamd64-only. On Kind clusters running on macOS Apple Silicon (arm64), the arm64 variant of the sandbox base image is selected but theopenshell-sandboxbinary copied bysupervisor-initis x86_64 — causing sandbox pods to fail with:The
Dockerfile.imagesalready has full cross-compilation support viadeploy/docker/cross-build.sh. This PR just wires up CI to build and publish the supervisor image as a multi-arch manifest.Test plan
kagenti-ci.ymlchecks)mvp,Publish Imagesworkflow runs and pushesghcr.io/kagenti/openshell/supervisor:mvp-<sha>with bothlinux/amd64andlinux/arm64manifestsdocker manifest inspect ghcr.io/kagenti/openshell/supervisor:mvp-<sha>shows both architectureskagenti/kagentiwires--supervisor-imagein the openshell Helm chart to use the new image tag